Physical Security
Cameras, access control and perimeter systems for offices, warehouses and industrial sites.
Full discipline page →CCTV and IP Camera Systems
Hikvision and Dahua camera systems designed around what you actually need to see, with recorder sizing worked back from how long you must keep footage rather than from a box on a shelf.
Access Control and Biometrics
Readers, controllers and biometric terminals on ZKTeco and Hikvision hardware, with door hardware, power and fail-safe behaviour specified as part of the same drawing.
Access Cards and Card Printers
Card stock, encoding and on-site printing, so issuing a card to a new starter does not mean waiting on a supplier.
Alarm and Perimeter Systems
Detection at the boundary rather than at the door, integrated with the camera system so an alarm brings up the relevant footage instead of a map reference.
Remote Monitoring and Playback
Live view and playback from wherever you are, with bandwidth and retention planned so remote access does not quietly consume the site connection.
Maintenance and Service Contracts
Lenses cleaned, firmware current, recordings verified. A camera system nobody checks is a camera system that was not recording on the day it mattered.
Cybersecurity
Layered protection that assumes something will get through, and plans for what happens next.
Full discipline page →Endpoint Antivirus and EDR
Kaspersky and ESET protection deployed centrally, with detection and response rather than a licence key handed to each machine and forgotten.
Firewall and Network Security
Fortinet and MikroTik firewalls configured to a documented policy, with segmentation that keeps guest, camera and business traffic apart.
Email Security and Anti-Spam
Filtering, SPF, DKIM and DMARC set correctly, because most breaches still arrive as an ordinary looking invoice.
Patch and Vulnerability Management
Operating systems and applications patched on a schedule and reported on, rather than whenever somebody clicks the reminder.
VPN and Secure Remote Access
Remote access that does not open the whole network, with per user credentials and access that can be revoked the day somebody leaves.
Security Audits and Reporting
A plain account of what is exposed and what it would take to close it, written to be read by a director rather than an engineer.
Six layers from the fence to the keyboard, specified as one system.
The boundary
Beams and detection at the fence line, so an alert comes before someone is at the door.
The view
Cameras placed for identification rather than coverage, with retention sized to your obligation.
The door
Readers, biometrics and cards, with a log that says who opened what and when.
The edge
Firewall policy and segmentation keeping guest, camera and business traffic apart.
The account
Per user access that can be revoked the day somebody leaves, and mail authenticated properly.
The keyboard
Antivirus with detection and response, patched on a schedule and reported on monthly.
What you receive at handover
A drawing set
Camera positions, coverage plan, door schedule and firewall policy, recorded and kept current.
One point of contact
A failed camera, a locked out staff member or a suspected breach all go to the same number.
Monitoring and reporting
Recording health, patch status and access logs checked continuously and reported monthly.
The other three pillars are specified the same way.
Connect
Connectivity and Network Infrastructure, from the street outside to the desk upstairs.
Operate
Managed IT, Cloud and Software, and AI and Automation, run quietly on one monthly account.
Sustain
Solar and Power, Hardware Supply, Web and Hosting, Custom Applications.
Tell us what has to be protected.
A quote, a second opinion on an installation somebody else left behind, or an honest assessment of where the gaps are.